diff options
| author | Russ Allbery <rra@stanford.edu> | 2007-08-27 16:53:33 +0000 | 
|---|---|---|
| committer | Russ Allbery <rra@stanford.edu> | 2007-08-27 16:53:33 +0000 | 
| commit | 60f6567822d9a9a13a3395097656af7220c7b31e (patch) | |
| tree | bc042534c65320bd3ea89ae95016d65acfc15979 /docs/design | |
| parent | 10c21db62ffe14c6f208cbfa938f72bc4876f594 (diff) | |
Rename delete to destroy in the API and MySQL fields to avoid the Perl
delete keyword.
Diffstat (limited to 'docs/design')
| -rw-r--r-- | docs/design | 21 | 
1 files changed, 3 insertions, 18 deletions
| diff --git a/docs/design b/docs/design index 541026c..a146514 100644 --- a/docs/design +++ b/docs/design @@ -67,7 +67,7 @@ Server Design      object:          create          Create a new wallet entry for an object -        delete          Delete the wallet entry for a given object +        destroy         Delete the wallet entry for a given object          owner           Set the owner of an object          acl             Set the ACL on an object          flag            Set or clear flags on an object @@ -76,14 +76,8 @@ Server Design          get             Retrieve the named object from the wallet          store           Store the named object in the wallet -        group-add       Add a principal to an ACL group -        group-remove    Remove a principal from an ACL group -        group-list      List the members of an ACL group -      The first six operations manipulate or display the metadata of the      object.  The next two operations store or retrieve the object itself. -    The last three operations allow manipulation of krb5-group ACLs (see -    below).      The owner and acl operations are only available to wallet      administrators.  Even if one is the listed owner of an object, one may @@ -111,15 +105,6 @@ Server Design      principal name as an identifier; only that principal will be      authorized by that ACL line. -    An ACL line of scheme krb5-group will have a group name as an -    identifier.  That group will have an owner and a list of Kerberos -    principals.  Any Kerberos principals on the list (not including the -    separate owner) will be authorized by that ACL line.  The owner is -    itself a reference to another ACL, which may include the group for a -    self-owning ACL.  Anyone on the ACL referenced by the owner attribute -    may list the principals in that group and add or remove a principal -    from that group. -      An ACL line of scheme netdb will have an identifier naming a specific      machine.  The user will be authorized if that user has a role of      "admin" or "team" for that machine.  See netdb-role-api for the @@ -153,10 +138,10 @@ Server Design        reference to an ACL of one line, that line having scheme "krb5" and        identifier "rra/root@stanford.edu". -    * Optional ACLs for get, store, show, delete, and flag operations. +    * Optional ACLs for get, store, show, destroy, and flag operations.        If there is an ACL for get, store, or show, that overrides the        normal permissions of the owner.  In the absence of an ACL for -      delete or flag, only wallet administrators can delete an object or +      destroy or flag, only wallet administrators can destroy an object or        set flags on that object.  This entry would need no special ACLs.      * Trace fields storing the user, remote host, and timestamp for when | 
